Linux Distros Unpatched Vulnerability : CVE-2018-5146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox 59.0.1, Firefox ES...

Linux Distros Unpatched Vulnerability : CVE-2018-20783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to rea...

Linux Distros Unpatched Vulnerability : CVE-2018-18607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in elflinkinputbfd in elflink.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. There is a NU...

Linux Distros Unpatched Vulnerability : CVE-2018-10845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct...

Linux Distros Unpatched Vulnerability : CVE-2018-17098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service heap corruption from size...

Linux Distros Unpatched Vulnerability : CVE-2018-19662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-12401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial...

Linux Distros Unpatched Vulnerability : CVE-2018-2783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE:...

Linux Distros Unpatched Vulnerability : CVE-2018-8797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even...

Linux Distros Unpatched Vulnerability : CVE-2018-1108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot...

Linux Distros Unpatched Vulnerability : CVE-2018-12398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy CSP. This...

Linux Distros Unpatched Vulnerability : CVE-2018-20176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service segfault. CVE-2018-201...

Linux Distros Unpatched Vulnerability : CVE-2018-14469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1nprint. CVE-2018-14469 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2018-20481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2018-19477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

Linux Distros Unpatched Vulnerability : CVE-2018-5803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the sctpmakechunk function net/sctp/smmakechunk.c when...

Linux Distros Unpatched Vulnerability : CVE-2018-6954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2018-8013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream as the class name which then use...

Linux Distros Unpatched Vulnerability : CVE-2018-14035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VMmemcpyvv in H5VM.c. CVE-2018-14035 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-14356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero- length UID. CVE-2018-14356 Note that Nessus relies on the...